Vulnerabilities > IBM > Spectrum Control > 5.2.12

DATE CVE VULNERABILITY TITLE RISK
2019-05-09 CVE-2019-4072 Insufficient Session Expiration vulnerability in IBM products
IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) allows users to remain idle within the application even when a user has logged out.
network
low complexity
ibm CWE-613
6.3
2019-05-09 CVE-2019-4071 Improper Neutralization of Formula Elements in a CSV File vulnerability in IBM products
IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of csv file contents.
network
low complexity
ibm CWE-1236
8.8